$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: grz9IGXHPXOZHCsEj3pGi8YzYJGZ07P7+hneGh51Xlg= Subject key identifier: DF:DE:C2:68:AA:8A:6E:48:30:B9:E3:15:E6:0C:2E:E1:06:05:57:02 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 0188 Signing time: Wed 05 Nov 2025 03:45:33 +0000 Manifest this update: Wed 05 Nov 2025 03:45:33 +0000 Manifest next update: Wed 12 Nov 2025 03:45:33 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: j8jAm7NEjGycLGVQkO5An9jL7Syu2pfy+NmkiRIJSKk=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: 4ZzJfaYDIWcwC7QMRrN8yPR83xv8sh7dqWbbzPE3dT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: Nov 5 03:45:33 2025 GMT Not After : Nov 12 03:45:33 2025 GMT Subject: CN=690ac85d-5e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:71:1e:5b:8f:cc:43:8f:13:44:cd:77:5b: a2:74:51:41:93:a1:fb:4b:20:78:6e:cc:9a:2d:3c: 1c:b2:7b:20:e1:4d:e6:43:1f:75:2c:48:7d:60:3c: ca:d2:cc:4b:c4:cc:10:d3:ba:6f:3e:77:74:b7:57: dc:bf:78:0b:4d:96:29:f2:79:16:e8:09:29:87:d9: a9:fc:ef:fd:b2:26:1c:fc:33:b5:e7:5a:4a:35:32: 80:bb:51:03:1c:84:c3:a1:81:2c:b9:88:8f:17:eb: 62:ad:de:20:2c:c7:24:6c:5f:46:3b:07:d5:59:47: 0e:f9:05:c3:55:b0:29:79:b3:13:44:2e:dd:07:fb: 77:a8:72:25:23:70:8b:f2:dd:a0:8b:e2:de:03:3e: 32:a2:26:d2:95:f9:f1:cc:82:6e:f9:e1:80:30:cb: bd:6c:00:5b:79:bb:04:e4:be:74:bf:1b:2f:bc:d0: da:b3:ee:12:00:c3:e4:ef:74:72:e3:fb:6d:1c:47: af:70:24:43:b8:07:5a:b8:2d:a9:1a:cc:13:00:31: 75:ca:e8:0f:c2:99:b5:f0:d7:6f:df:5a:6d:32:d4: 68:c9:bf:6d:b3:5e:82:a7:de:be:6b:e2:cf:2d:80: ab:cf:5a:25:03:08:27:c0:24:e1:64:ec:f7:51:39: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DE:C2:68:AA:8A:6E:48:30:B9:E3:15:E6:0C:2E:E1:06:05:57:02 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:84:6a:4f:ef:6f:5e:4f:2a:ef:7c:28:36:cd:d2:30:7b:2e: f8:2d:4b:c9:c5:da:a8:52:06:ce:d5:05:da:02:cf:f9:88:bc: 42:a6:ec:a3:c4:d7:6f:d6:bf:9c:a8:39:33:87:b0:38:af:90: 74:b1:c9:6b:de:77:2b:22:10:b7:be:a1:b3:84:48:12:6d:25: 80:53:e3:d1:a8:63:40:1f:c9:3f:c4:af:7b:58:ba:99:b9:f4: 76:34:7a:7b:eb:c9:be:b2:49:ce:7f:fc:4a:b2:83:ff:c3:74: 3c:10:83:2c:d3:82:d4:7a:d6:64:3a:68:9a:69:08:5f:bb:4c: a9:94:91:96:62:57:d5:5e:57:bc:be:51:cf:cc:6d:7a:1a:ab: 26:af:ff:bb:89:da:31:7a:05:e4:f7:82:53:6c:c5:76:89:2a: 67:0d:a0:8c:39:57:fb:30:ac:9a:af:17:66:b4:2d:84:03:a3: 42:62:1b:db:98:62:30:82:0f:08:0d:78:76:53:e6:05:00:1b: 35:99:cf:ea:f4:af:90:47:bd:d5:f6:91:c8:be:c3:35:19:ee: 98:02:30:4a:90:c2:32:d1:a9:63:bb:25:7f:18:63:b6:39:ae: b4:4f:46:fc:28:18:f6:65:96:6a:cc:3f:6b:6c:ad:5b:c6:ea: 69:95:65:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUxMTA1MDM0NTMzWhcNMjUxMTEyMDM0NTMzWjAYMRYwFAYD VQQDEw02OTBhYzg1ZC01ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YBxHluPzEOPE0TNd1uidFFBk6H7SyB4bsyaLTwcsnsg4U3mQx91LEh9YDzK 0sxLxMwQ07pvPnd0t1fcv3gLTZYp8nkW6Akph9mp/O/9siYc/DO151pKNTKAu1ED HITDoYEsuYiPF+tird4gLMckbF9GOwfVWUcO+QXDVbApebMTRC7dB/t3qHIlI3CL 8t2gi+LeAz4yoibSlfnxzIJu+eGAMMu9bABbebsE5L50vxsvvNDas+4SAMPk73Ry 4/ttHEevcCRDuAdauC2pGswTADF1yugPwpm18Ndv31ptMtRoyb9ts16Cp96+a+LP LYCrz1olAwgnwCThZOz3UTnpAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/ewmiq im5IMLnjFeYMLuEGBVcCMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhGpP729eTyrvfCg2zdIwey74LUvJxdqoUgbO1QXaAs/5iLxCpuyj xNdv1r+cqDkzh7A4r5B0sclr3ncrIhC3vqGzhEgSbSWAU+PRqGNAH8k/xK97WLqZ ufR2NHp768m+sknOf/xKsoP/w3Q8EIMs04LUetZkOmiaaQhfu0yplJGWYlfVXle8 vlHPzG16Gqsmr/+7idoxegXk94JTbMV2iSpnDaCMOVf7MKyarxdmtC2EA6NCYhvb mGIwgg8IDXh2U+YFABs1mc/q9K+QR73V9pHIvsM1Ge6YAjBKkMIy0aljuyV/GGO2 Oa60T0b8KBj2ZZZqzD9rbK1bxupplWWs -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:52 2025 by rpki-client